I have figured out that dependency on libssl.so.6 and libcrypto.so.6 was coming from ldap library.
The issue is solved by eliminating ldap from libcurl dependencies. How libcurl uses ldap? I want to make sure that functionality we are interested in is not affected. Thank you, Alona From: Alona Rossen Sent: June 12, 2014 11:56 AM To: '[email protected]' Subject: libcurl links to openssl libraries twice Hello, I rebuild libcurl with openssl1.0.0m in view of recent openssl security vulnerability announcement. I linked dynamically and was surprised to see that libcurl links to two different versions of openssl: one that I specified, and another one found in the system: /usr/local/curl72/lib> ldd libcurl.so linux-gate.so.1 => (0x00b43000) libidn.so.11 => /usr/lib/libidn.so.11 (0x00a56000) libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x003da000) librt.so.1 => /lib/librt.so.1 (0x00394000) => libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x00232000) => libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00414000) libz.so.1 => /usr/lib/libz.so.1 (0x00602000) libdl.so.2 => /lib/libdl.so.2 (0x00ec7000) libc.so.6 => /lib/libc.so.6 (0x00817000) liblber-2.3.so.0 => /usr/lib/liblber-2.3.so.0 (0x00a1f000) libresolv.so.2 => /lib/libresolv.so.2 (0x00de9000) libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x0039e000) => libssl.so.6 => /lib/libssl.so.6 (0x00110000) => libcrypto.so.6 => /lib/libcrypto.so.6 (0x00c59000) libpthread.so.0 => /lib/libpthread.so.0 (0x00218000) /lib/ld-linux.so.2 (0x007fb000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x00155000) libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00187000) libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00283000) libcom_err.so.2 => /lib/libcom_err.so.2 (0x001c9000) libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x001cc000) libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x00655000) libkeyutils.so.1 => /lib/libkeyutils.so.1 (0x00bda000) libselinux.so.1 => /lib/libselinux.so.1 (0x00686000) libsepol.so.1 => /lib/libsepol.so.1 (0x00316000) /usr/local/curl72/lib> Thank you, Alona
------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
